EUVD-2004-1318

Malware in sbrugna...

3S Vision / Asante Voyager / ALinking Hardcoded Accounts

Hard-coded accounts on multiple network cameras =============================================== ADVISORY INFORMATION Title: Hard-coded accounts on multiple network cameras Discovery date: 05/06/2013 Release date: 11/07/2013 Advisory URL: http://goo.gl/82Rlb Credits: Roberto Paleari...

Asante FM2008 backdoor account

Undocumented superuser/asante account...

Re: Asante FM2008 10/100 Ethernet switch backdoor login

Asante have released v1.07 of this switch's firmware which removes the "superuser" "asante" CLI credentials. After uploading this firmware into my switch, I examined a TFTP dump and could not identify similar credentials. It does not positively rule in or out that the backdoor is gone, but Asante...

CVE-2004-1321

CVE-2004-1321 affects Asante FM2008 devices running firmware 1.06. The configuration backup stores the username and password in cleartext, which could allow remote attackers to gain unauthorized access. The underlying issue is cleartext credential storage in backup data, enabling exposure of cred...

CVE-2004-1320

CVE-2004-1320 affects Asante FM2008 running firmware 1.06, where a default username and password can let remote attackers gain unauthorized access. The available documents confirm the affected product/firmware and the credential-based access issue, but do not provide a dedicated patch version or ...

CVE-2004-1321

The configuration backup in Asante FM2008 running firmware 1.06 stores the username and password in cleartext, which could allow remote attackers to gain unauthorized access...

CVE-2004-1320

Asante FM2008 running firmware 1.06 is shipped with a default username and password, which could allow remote attackers to gain unauthorized access...

Asante FM2008 10/100 Ethernet switch backdoor login

The Asante FM2008 is an 8 port managed Ethernet 10/100 switch. It may be managed, like many others in its device class, by Telnet, by serial port, by HTTP, or by SNMP. Also like most similar devices, the serial port, HTTP, and Telnet access methods require one to provide username/password...

CVE-2004-1321

The configuration backup in Asante FM2008 running firmware 1.06 stores the username and password in cleartext, which could allow remote attackers to gain unauthorized access...

CVE-2004-1320

Asante FM2008 running firmware 1.06 is shipped with a default username and password, which could allow remote attackers to gain unauthorized access...